z34PDnVzyEItkXaInw[.]exe | Triage

Sharing

General

Target

z34PDnVzyEItkXaInw.exe
Size

772KB
MD5

c85149f68536d2bccb60ad32e88d6895
SHA1

703e4b9d6db31ad5b83048b3ebf2fea81492df02
SHA256

4fc57cfe6ad19b764721faf9215457a09ddeebc7402c8833f290181af0b20d5e
SHA512

a766ce5265f8a33eb86fe2686a7a02d6df5661c4a7859ff9cc05c10f41d3600bf55f9fcee76197010d0b1d27b4d76e64df3de5143cf4ec8a6a34299362d0db7c
SSDEEP

24576:3/zD1ArxfnREzkQsImlHqocz5dqIzmarw7w:3/tixfmYQsxFPudLSar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z34PDnVzyEItkXaInw.exe

Files

z34PDnVzyEItkXaInw.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ